A website owner purposefully kept the password complexity weak to provide less friction for users, leading to security vulnerabilities that could be exploited by hackers. This emphasizes the importance of strong password requirements to protect user accounts.